Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
File:                     dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft (raw, json)
Hash identifier:          urhLblyBUqAyEjndGuNLMngJWoDM6NK0LIuCWwZWeds=
Subject key identifier:   49:67:14:BD:57:BF:97:0D:BF:65:FC:0C:D3:4F:9D:F6:4A:07:E7:36
Authority key identifier: 76:6D:18:B7:A5:A8:37:E6:71:4F:BA:B2:52:40:0A:3B:EA:BC:22:0A
Certificate issuer:       /CN=766d18b7a5a837e6714fbab252400a3beabc220a
Certificate serial:       019D9CD1C19744AC9C209463A8BA06F93FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
Manifest number:          56
Signing time:             Fri 17 Apr 2026 19:01:25 +0000
Manifest this update:     Fri 17 Apr 2026 19:01:25 +0000
Manifest next update:     Sat 18 Apr 2026 19:01:25 +0000
Files and hashes:         1: TPgJA7asD1USxd5F7pee5lciH88.roa (hash: J3JqRxhZZokO/izJrrFgyJGCYZDVRXSpr2zjvNoSLcU=)
                          2: dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl (hash: AbsQ+gcmiO4qBvxe44kwLQ6MLycqQGRziXvdQ3Svj9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:c1:97:44:ac:9c:20:94:63:a8:ba:06:f9:3f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766d18b7a5a837e6714fbab252400a3beabc220a
        Validity
            Not Before: Apr 17 19:01:25 2026 GMT
            Not After : Apr 18 19:01:25 2026 GMT
        Subject: CN=496714bd57bf970dbf65fc0cd34f9df64a07e736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:5e:4e:f4:3e:21:0e:b5:ba:1f:bd:67:ae:
                    1e:f1:d7:cf:dc:6b:11:c0:d7:05:20:f8:f3:0f:3c:
                    4b:10:f5:28:07:e9:5d:57:e5:2a:37:c8:00:7c:9f:
                    74:a1:78:96:c1:2e:71:f9:ec:ca:0d:be:9a:37:59:
                    9b:8d:24:1e:38:35:66:b9:3d:f5:34:95:a0:b1:a7:
                    31:12:fa:41:f0:ad:fb:18:56:4c:41:31:22:75:2f:
                    1b:cb:fb:b5:77:1b:74:a7:fa:6b:5d:b5:1e:f0:12:
                    de:38:26:38:13:b0:91:68:75:1a:60:ba:95:bf:40:
                    52:6e:ab:d2:ea:97:a0:f8:e6:14:f1:83:b7:74:f9:
                    8e:21:0a:7a:36:39:3e:97:c2:dc:45:e2:df:4f:0d:
                    92:1f:3b:dd:de:39:c1:7f:a4:09:8c:92:25:c0:61:
                    52:05:a8:4c:dd:8c:28:99:20:1c:4c:a9:78:ff:0d:
                    66:df:68:8c:e2:f1:e9:f0:6d:fe:49:48:35:37:53:
                    83:02:b5:5a:86:bd:12:fc:03:c5:67:f3:10:67:23:
                    6a:b7:1b:b2:3c:08:75:43:28:e5:b6:75:ce:9f:20:
                    cf:2b:14:ff:5e:50:a2:30:d0:d9:a6:a8:de:74:df:
                    da:72:06:57:e7:f4:f0:79:47:9e:ad:bf:50:b9:42:
                    4f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:67:14:BD:57:BF:97:0D:BF:65:FC:0C:D3:4F:9D:F6:4A:07:E7:36
            X509v3 Authority Key Identifier:
                keyid:76:6D:18:B7:A5:A8:37:E6:71:4F:BA:B2:52:40:0A:3B:EA:BC:22:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aa766b-8877-415e-adac-aff31954e7a7/1/dm0Yt6WoN-ZxT7qyUkAKO-q8Igo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:90:1c:21:ec:f3:a8:84:90:a4:58:a5:8f:4c:ac:87:1a:c8:
         99:6a:c3:78:43:40:eb:11:93:fb:8a:cf:37:83:82:33:e0:48:
         e4:f9:06:91:a6:ff:8b:c5:e2:49:2d:23:35:f9:85:9e:5d:5c:
         4e:c5:77:af:a6:4f:bb:40:54:f9:42:04:d0:2e:dd:dd:47:e7:
         3d:f3:64:7e:70:b4:ff:57:b7:2a:59:02:3b:50:4a:d7:4b:ed:
         00:5f:cf:0d:d5:a1:33:f2:8a:46:a1:aa:96:d5:f2:b9:75:77:
         af:fa:d7:cb:f2:d6:dc:51:5e:fe:44:13:9c:5c:eb:0b:93:4d:
         2d:ed:25:71:e6:b8:aa:36:e0:a3:dd:38:74:bb:a5:ae:88:0b:
         36:fa:98:d9:97:5d:f0:b6:01:1a:0b:89:89:ed:24:5c:47:04:
         6f:b4:e3:8f:6c:8e:24:a9:02:47:b9:a3:71:1a:74:0a:76:90:
         11:12:36:6b:28:dd:4c:9e:db:19:e4:7b:a8:fd:c5:3f:8a:b6:
         de:1d:e6:99:4a:1e:a9:34:3f:a4:79:1c:1e:18:77:b9:b3:22:
         b3:89:e3:9a:d5:94:2c:cf:20:aa:c8:65:87:23:4e:18:58:d9:
         81:29:a7:73:c0:63:2b:06:5d:bb:6f:7f:59:2e:cb:cb:99:2e:
         ab:7e:78:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:45 2026 by rpki-client